Security·4,791 discussions

Hacking into Web Site

Locked

One of my web sites runs on IIS 4 with NT 4 and NT service pack 6a. The site consists of asp pages with an asa page which sets sessions to the SQL 7 server for database queries. SQL 7 is running on another box and not on the Web server. I am currently experiencing a situation where several persons are using the following command to expose the username and password that is used by the asa page to create a session to the SQL server:

“http://WWW.Websitename/GLOBAL.ASA%20+.HTR”

Which securitypatch for IIS should be applied here – or is there a service pack available for IIS that could be used here?

Appreciate any help here. Thank you

Topic

Hacking into Web Site

In reply to Hacking into Web Site

This might help

http://support.microsoft.com/support/kb/articles/Q260/0/69.ASP

Hacking into Web Site

In reply to Hacking into Web Site

Poster rated this answer

Hacking into Web Site

In reply to Hacking into Web Site

This question was closed by the author

[Author]

Replies